CVE-2026-74693
Received Received - Intake

Prestera Firmware Header Length Validation Flaw

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74693
EUVD
EUVD-2026-64380

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the prestera network driver. The issue occurs when the function prestera_fw_hdr_parse() reads a firmware header without first verifying the firmware image contains that header. This could lead to improper handling of malformed or truncated firmware files.

Detection Guidance

This vulnerability involves a missing length check in the Linux kernel's prestera network driver before parsing firmware headers. Detection requires checking if your system uses the affected prestera driver and inspecting firmware files for proper header validation. No direct commands are provided in the context to detect this issue.

Impact Analysis

An attacker could exploit this to cause a denial of service by crashing the system or potentially execute arbitrary code if malformed firmware is processed. Systems using the prestera network driver may be affected.

Mitigation Strategies

Update your Linux kernel to the latest patched version where the prestera_fw_hdr_parse() function includes proper firmware header length validation. Avoid loading untrusted firmware images until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74693. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart